2204 Commits
Author SHA1 Message Date
NGPixel 6f042e97cc ci: disable docker build summary v2.5.314 2026-05-01 06:26:10 -04:00
NGPixel ec36eb2d86 fix: update arm docker base to node 24 2026-05-01 06:15:46 -04:00
Nicolas Giard da64dcdd03 ci: update build workflow to latest action versions
Updated GitHub Actions workflow to use newer versions of actions and changed the Ubuntu runner version for ARM builds.
2026-05-01 06:11:22 -04:00
NGPixel 34cd445a46 fix: users + groups permissions assign logic + text hints v2.5.313 2026-04-27 04:15:54 -04:00
NGPixel 188d36e6bb fix: prevent user assignment to elevated groups 2026-04-20 06:03:17 -04:00
Nicolas Giard 42a72183d0 docs: Update README 2026-03-23 12:04:41 -04:00
NGPixel f0f71536ab ci: pin packer postgres to 17 2026-02-26 05:41:53 -05:00
NGPixel 48dc6da333 ci: fix packer cleanup script 2026-02-26 05:23:59 -05:00
NGPixel 4a1a6a934f ci: purge droplet-agent in packer cleanup script 2026-02-26 05:10:46 -05:00
NGPixel 429866446b ci: fix packer docker script 2026-02-26 04:59:50 -05:00
NGPixel 44efae9493 ci: update packer build workflow 2026-02-26 04:51:10 -05:00
NGPixel 0456332325 ci: update packer definition 2026-02-26 04:43:06 -05:00
Nicolas Giard 0317f71199 ci(helm): use prod chart 2026-02-22 00:22:00 -05:00
Nicolas Giard 4f3917ff22 ci(helm): fix chart versioning
Updated Helm chart versioning to use dynamic version from Chart.yaml.
2026-02-22 00:13:49 -05:00
Nicolas Giardandacidsugarx 8fc931a0d9 fix(helm): Replace bitname PostgreSQL chart with custom statefulset (#7936)
* fix(helm): Replace Bitnami PostgreSQL chart with custom StatefulSet (#7831)

* refactor: migrate from Bitnami PostgreSQL to official PostgreSQL image

Replace Bitnami PostgreSQL dependency with custom PostgreSQL StatefulSet implementation
Add new PostgreSQL templates: statefulset, service, and PVC
Update values.yaml to include PostgreSQL image configuration with official postgres:17.4 image
Implement custom PostgreSQL deployment using official Docker Hub image instead of Bitnami chart
Add PostgreSQL resource, nodeSelector, tolerations, and affinity configuration options
Update helper templates to support new PostgreSQL implementation
Update deployment template to connect to the new PostgreSQL implementation
Update README.md to document the new PostgreSQL configuration parameters

BREAKING CHANGE: This replaces the Bitnami PostgreSQL dependency with a custom PostgreSQL implementation using the official
PostgreSQL image from Docker Hub, changing how PostgreSQL is deployed and configured.

Signed-off-by: Ilya Gilev jazer23569@gmail.com

* feature: added a option to use an existing secret for postresql installation

---------

Signed-off-by: Ilya Gilev jazer23569@gmail.com

* refactor(helm): adjust helm templates for clarity

---------

Signed-off-by: Ilya Gilev jazer23569@gmail.com
Co-authored-by: acidsugarx <58903233+acidsugarx@users.noreply.github.com>
2026-02-22 00:04:24 -05:00
Kolega.devandkolega.dev d14b0a5509 fix: authenticate GraphQL subscription WebSocket connections (#7922)
The onConnect handler for GraphQL subscriptions was empty, allowing any
client to establish a WebSocket connection and subscribe to loggingLiveTrail
without authentication. Added JWT verification in onConnect using the same
RS256 credentials and permission checks (manage:system) used elsewhere.

Co-authored-by: kolega.dev <faizan@kolega.ai>
v2.5.312
2026-02-11 21:40:25 -05:00
Kolega.devandkolega.dev 7ae6635d16 fix: validate loginRedirect cookie to prevent open redirect (#7923)
The loginRedirect cookie value was used directly in res.redirect() and
window.location.replace() without validation, allowing redirection to
arbitrary external URLs. Added validation to ensure the redirect target
is a relative path before use.

Co-authored-by: kolega.dev <faizan@kolega.ai>
2026-02-11 21:27:36 -05:00
mod242 6ae53bf1bd feat: map OIDC/OAuth2 avatar claims to user pictureUrl (#7908) 2026-01-23 18:36:52 -05:00
Felix Eckhofer 3dcf20ab6f fix: diagram svg styling add !important qualifier for light scheme (#7905)
This is required, because the <svg> element has an inline style with
`color-scheme: light dark`, which has higher specificity than our css
rule.
2026-01-22 12:27:29 -05:00
Felix EckhoferandNicolas Giard 3ba58f754d fix: apply theme style to embedded diagram svg (#7903)
* fix: Apply theme style to embedded diagram (#7903)

When diagrams are created with "adaptive colors" they automatically
change to light-/darkmode depending on the browser preference. This
leads to rendering problems when the settings in the browser differ
from the wiki.js theme setting.

Fixes #7677

* fix: Update color scheme for SVG in diagram class

Refactor SVG color scheme handling in diagram class.

* fix: remove duplicate svg first-child class

Removed unnecessary direction property from first SVG in diagram.

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
2026-01-20 16:40:00 -05:00
NGPixel 85c304f583 fix: add cookie secure flag when site is using https (client-side) v2.5.311 2026-01-08 04:49:09 -05:00
NGPixel 1d0d87af6e fix: add cookie secure flag when site is using https 2026-01-08 04:22:22 -05:00
NGPixel 7d4627ba0b fix: rocketchat auth prototype pollution via userProfile function 2026-01-08 03:40:26 -05:00
NGPixel 857c1720b1 fix: css editor in page properties dialog not loading 2026-01-08 03:04:21 -05:00
NGPixel 19c26e58c9 fix: handle breadcrumb locale prefix correctly 2026-01-08 03:00:47 -05:00
Felix Eckhofer b950e065e9 fix: stop dompurify from breaking draw.io diagrams (#7888)
Newer versions of dompurify strip <foreignobject> tags if not explicitly
allowed. See https://github.com/cure53/DOMPurify/issues/1040

Fixes #7744
2026-01-06 16:56:35 -05:00
NGPixel 028dcd5656 fix: use promisified pipeline from stream v2.5.310 2026-01-06 00:54:56 -05:00
Nicolas Giard 29c8671ab2 fix: breadcrumb path generation 2026-01-06 00:38:16 -05:00
NGPixel af839795ae chore: update dependencies v2.5.309 2026-01-03 03:27:51 -05:00
NGPixel 4eb9dabb63 refactor: update docker images to Node 24 and fix promisify calls 2026-01-03 03:03:15 -05:00
NGPixel f68d1f60ca fix: hide unfinished features 2026-01-03 02:30:55 -05:00
StofnerP 077ac97b2d fix: add locale to home icon breadcrumb nav (#7825) 2025-12-31 21:09:21 -05:00
Mia Moir 8b358fc264 fix: Update keycloak authentication definition hints (#7809)
Update keycloak authentication definition to match endpoints recommended by keycloak at https://www.keycloak.org/securing-apps/oidc-layers
2025-12-31 21:02:42 -05:00
Wingqvist 326974cdd5 fix(profile): Prevent autofill on header search bar (#7688)
This commit resolves the recurring issue where password managers
incorrectly autofill the header search bar when viewing the user
profile page.

This is achieved by wrapping the password change fields in a <form>
element, properly scoping them for browser autofill logic, and using
modern, standard `autocomplete` attributes. This addresses the root
cause of the issue, whereas previous attempts tried to mitigate the
symptom in the search bar.

Fixes #2324
Closes #3327
2025-12-31 21:00:06 -05:00
Karl BerggrenandNicolas Giard 5c80184a1d feat: add support for database connection via socketPath when using mysql2 driver (#7839)
* Added support for database socketPath in configure file when using dbClient mysql2 (mysql or mariadb)

* refactor: mysql dbConfig to conditionally set socketPath

Updated database configuration to conditionally include socketPath from WIKI.config.

* fix: socketPath assignment typo

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
2025-12-31 20:53:47 -05:00
ss033andNicolas Giard a02e0131c1 fix: enhance logging for Google and GitHub OAuth2 authentication (#7848)
Co-authored-by: Nicolas Giard <github@ngpixel.com>
2025-12-31 20:44:14 -05:00
scottnursten-22andNicolas Giard 407aacfa19 fix(search): always ensure pg_trgm extension availability for PostgreSQL search (#7845)
* fix(search): ensure pg_trgm extension availability for PostgreSQL search

- Move pg_trgm extension creation to initialization phase to ensure availability
- Add error handling for similarity search queries that depend on pg_trgm
- Add proper logging for debugging search-related issues

Fixes issues where PostgreSQL search suggestions fail due to missing or
improperly initialized pg_trgm extension, particularly in containerized
environments where extension creation timing matters.

* fix: Simplify error handling in search suggestion logic

Refactor error handling for search suggestions to simplify code.

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
2025-11-13 15:27:26 -05:00
Benoît des Ligneris 54d21ae538 fix: add tor1 region to DigitalOcean spaces list (#7832) 2025-10-28 13:39:14 -04:00
Nicolas Giard dd48f28827 docs: update README 2025-10-09 00:19:29 -04:00
dhulripos b49c00226c fix: Add missing status code on unauthorized access (#7785)
* fix status code on unauthorized

* Remove unnecessary line breaks
2025-09-24 00:06:37 -04:00
Lyzandjmp 9f481221ab ci(helm): add custom environment variables to the deployment (#7784)
Co-authored-by: jmp <jmp@icij.org>
2025-09-11 12:58:59 -04:00
Craig Reyenga cd77f36120 fix: requests without user-agent causing error 500 (#7749) 2025-08-18 21:38:20 -04:00
Nicolas Giard 1b6c67ee77 fix: force wrap for code blocks in print view v2.5.308 2025-08-13 03:03:39 -04:00
Ole Christian TvedtandOle Christian Tvedt c093423307 feat: set groups based on Azure groups (#7736)
Co-authored-by: Ole Christian Tvedt <ole.christian.tvedt@defa.com>
2025-08-13 02:53:19 -04:00
Nicolas Giard 86abfea7f6 fix: update dompurify dependency + add cross-env 2025-08-13 02:52:46 -04:00
Nicolas Giard 07855ab329 docs: Update README.md 2025-07-28 13:11:47 -04:00
Nicolas Giard d96bbaf42c docs: Update SECURITY.md 2025-06-10 14:45:46 -04:00
Nadia Santalla 41d3ba4312 chore(helm): render external database URL if it is set (#7036) 2025-04-07 09:19:29 -04:00
Nicolas Giard 9bf9c8af47 ci: Update build.yml 2025-03-31 03:55:18 -04:00
Nicolas Giard 7053819f35 docs: Update README.md 2025-03-31 03:52:26 -04:00